sha256:b561cc37999c6296eeccfefa530377af65fb32e5575dd94df14f8b413aa833cb
Last pushed
about 10 hours by hayjohnny2000
Type
Sandbox Kit
Manifest digest
sha256:b561cc37999c6296eeccfefa530377af65fb32e5575dd94df14f8b413aa833cb
schemaVersion: "3"
displayName: OpenCode Omo Sandbox Kit
description: OpenCode baseline and launch contract for the OmO and Hindsight harness
version: 0.1.0
kind: workload
provides:
- [email protected]
- [email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/base-files@14
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/ca-certificates-java@20260311
- deb/ca-certificates@20260816
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/gcc-16-base@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/less@668
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libasan8@16
- deb/[email protected]
- deb/libatomic1@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libcc1-0@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libgcc-s1@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libgomp1@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libhwasan0@16
- deb/[email protected]
- deb/[email protected]
- deb/libitm1@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libjpeg8@8
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/liblsan0@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libquadmath0@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libstdc++6@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/libtsan2@16
- deb/libubsan1@16
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/lto-disabled-list@79
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/tzdata@2026
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
capabilities:
- type: com.docker.sandbox/lifecycle@1
config:
install:
- command:
- bash
- /usr/share/opencode-omo/hooks/install.sh
description: Initialize config and mounted SQL storage before the first launch
env:
- OPENCODE_VERSION
- BUN_VERSION
- OMO_VERSION
- UV_VERSION
- HINDSIGHT_VERSION
- HINDSIGHT_EMBED_VERSION
- SUPERPOWERS_COMMIT
user: agent
startup:
- background: true
command:
- bash
- /usr/share/opencode-omo/hooks/start.sh
description: Reject unsafe persistent storage, then start Hindsight and check local health alongside the agent
env:
- OPENCODE_API_KEY
- OPENCODE_VERSION
- BUN_VERSION
- OMO_VERSION
- UV_VERSION
- HINDSIGHT_VERSION
- HINDSIGHT_EMBED_VERSION
- HINDSIGHT_LLM_MODEL
user: agent
- type: com.docker.sandbox/sbx@1
- type: com.docker.sandbox/host-mount@1
config:
mode: "0755"
path: /home/agent/workspace
description: Project workspace; explicitly bind existing host PROJECT_DIR (default $HOME/opencode-omo-sandbox) here
- type: com.docker.sandbox/host-mount@1
config:
mode: "0700"
path: /home/agent/opencode-hindsight-memory
description: Dedicated single-writer Hindsight storage; explicitly bind existing host HINDSIGHT_MEMORY_DIR (default $HOME/opencode-hindsight-memory-opencode) here; no adoption or migration
- type: com.docker.sandbox/network-policy@1
config:
runtime:
allow:
- opencode.ai
- bun.com
- registry.npmjs.org
- mcp.grep.app
- mcp.context7.com
- mcp.exa.ai
- pypi.org
- files.pythonhosted.org
- astral.sh
- releases.astral.sh
- huggingface.co
- cdn-lfs.huggingface.co
- cdn-lfs-us-1.huggingface.co
- cdn-lfs-eu-1.huggingface.co
- cas-bridge.xethub.hf.co
- cas-server.xethub.hf.co
- transfer.xethub.hf.co
- download.pytorch.org
- download-r2.pytorch.org
- openaipublic.blob.core.windows.net
- deno.land
- json.schemastore.org
- biomejs.dev
- github.com
- codeload.github.com
- raw.githubusercontent.com
- release-assets.githubusercontent.com
- objects.githubusercontent.com
- models.dev
- cdn-lfs.hf.co
- cdn-lfs-us-1.hf.co
- cdn-lfs-eu-1.hf.co
- us.aws.cdn.hf.co
- us.gcp.cdn.hf.co
- cas-server.xethub-eu.hf.co
- transfer.xethub-eu.hf.co
- hf-mirror.com
- cdn.playwright.dev
- playwright.download.prss.microsoft.com
- playwright.azureedge.net
- storage.googleapis.com
- repo1.maven.org
- repo.maven.apache.org
- build.shibboleth.net
- geodev.edina.ac.uk
- maven.pkg.github.com
- deb.nodesource.com
- cdn.agentclientprotocol.com
- docs.docker.com
- type: com.docker.sandbox/credential@1
config:
apiKey:
inject:
- domain: opencode.ai
format: Bearer %s
header: Authorization
name: OPENCODE_API_KEY
proxyManaged: true
phase: runtime
service: opencode-go
description: OpenCode Go runtime binding; OpenCode uses its own Go provider config and Hindsight shares the same host key
- type: com.docker.sandbox/agent-context@1
config:
contentFile: /usr/share/sandbox/kit/kit/opencode.md
directory: /home/agent/.config/opencode
filename: AGENTS.md
args:
BUN_VERSION:
default: 1.4.3
description: Exact Bun release installed in the image
pattern: ^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$
buildArg: BUN_VERSION
HINDSIGHT_EMBED_VERSION:
default: 1.1.0
description: Hindsight embed pin; keep aligned with the API version
pattern: ^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$
buildArg: HINDSIGHT_EMBED_VERSION
HINDSIGHT_LLM_MODEL:
default: deepseek-v4.1-flash
description: Raw OpenCode Go model ID for Hindsight
pattern: ^[^\s\x00-\x1f\x7f]{1,256}$
env: HINDSIGHT_LLM_MODEL
HINDSIGHT_VERSION:
default: 1.1.0
description: Exact Hindsight API release installed in the image
pattern: ^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$
buildArg: HINDSIGHT_VERSION
LSP_NPM_PACKAGES:
default: ""
description: Optional exact [email protected] specs; no extra LSP installs by default
pattern: ^((@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*@(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(\s+(@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*@(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*))*)?$
buildArg: LSP_NPM_PACKAGES
OMO_VERSION:
default: 5.1.56
description: Exact OmO release installed in the image
pattern: ^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$
buildArg: OMO_VERSION
OPENCODE_VERSION:
default: 1.19.5
description: OpenCode 1.x release installed in the workload image for OmO compatibility
pattern: ^1\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$
buildArg: OPENCODE_VERSION
SUPERPOWERS_COMMIT:
default: bb92a77741419a4ab5f06e711a283343f1ada0c3
description: Full Superpowers commit installed in the image
pattern: ^[a-fA-F0-9]{40}$
buildArg: SUPERPOWERS_COMMIT
UV_VERSION:
default: 0.13.0
description: Exact uv and uvx release installed in the image
pattern: ^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$
buildArg: UV_VERSION
dockerfile: kit.dockerfile